After the key pair is generated, you need to upload the pubic key file to the server through FTP or TFTP and complete the server end configuration before you continue to configure the client.

# Establish an SSH connection to the server 10.165.87.136.

[device] ssh2 10.165.87.136 identity-key dsa

Username: client001

Trying 10.165.87.136 ...

Press CTRL+K to abort

Connected to 10.165.87.136 ...

The Server is not authenticated. Do you continue to access it?(Y/N):y

Do you want to save the server's public key?(Y/N):n

********************************************************************************

* Copyright(c) 2004-2009 3Com Corp. and its licensors. All rights reserved. *

*

Without the owner's prior written consent,

*

*

no decompiling or reverse-engineering shall be allowed.

*

********************************************************************************

<device>

When the Device Acts as an SSH Client and First-time authentication is not Supported

Network requirements

As shown in Figure 1-25, establish an SSH connection between Switch A (SSH Client) and Switch B (SSH Server) for secure data exchange. The user name is client001 and the SSH server’s IP address is 10.165.87.136. The publickey authentication mode is used to enhance security.

Figure 1-25Network diagram of SSH client configuration

Switch B

Switch A

SSH Server

VLAN-Interface 1 SSH Client

 

 

10 .165 .87.137./24

 

 

 

VLAN-Interface 1

 

 

10.165 .87 .136./24

 

Configuration procedure

zConfigure Switch B

#Create a VLAN interface on the device and assign an IP address for it to serve as the destination of the client.

<device> system-view

[device] interface vlan-interface 1

[device-Vlan-interface1] ip address 10.165.87.136 255.255.255.0

1-33

Page 530
Image 530
3Com WX3000 operation manual 25Network diagram of SSH client configuration